Hotmail Users Targeted: 'Mail Access Hotmail 7K' Leaked 3,980 Logins

In September 2025, HEROIC analysts tracked a combolist titled "MAIL ACCESS HOTMAIL 7K MIX VALID 100" that a Telegram user uploaded to a public channel. The file targets Hotmail and Outlook account holders specifically, containing 3,980 records that pair email addresses with plaintext passwords and the URLs those logins were used on. Why Hotmail and Outlook Users Are Specifically at Risk Here This list was not scraped at random. Its name signals that it was built and tested specifically against Hotmail and Outlook logins, which makes it more dangerous than a generic combolist. Email accounts like these are often the recovery method for banking apps, social media, and other logins, so a compromised inbox can become the key that unlocks several other accounts at once. With passwords stored in plaintext and matched to their exact login URL, an attacker can move straight to testing these accounts. What Was Exposed Email addresses Plaintext passwords, stored in readable, unencrypted form URLs showing where each login was used Why This Matters for the 3,980 Hotmail Accounts Involved Because this list appears to have already been checked for working logins, the accounts in it are more likely to still be active than in an untested combolist. Attackers can use compromised email access to reset passwords on other accounts tied to that inbox, opening the door to account takeover well beyond email itself, along with financial fraud or identity theft if personal information is stored in the account. How a Targeted Combolist Like This One Gets Built Lists labeled as "mix valid" are typically compiled from stolen credentials, then run through checker tools that test each login before the list is shared, so buyers know the accounts actually work. Focusing on one email provider, in this case Hotmail, is a common tactic because it lets an attacker target a specific pool of accounts rather than a mixed, unverified batch. Telegram makes it easy to circulate lists like this quickly to interested buyers. Check If Your Hotmail Account Was Among the 3,980 Exposed If you use Hotmail or Outlook, it is worth confirming your account was not part of this list. HEROIC's free breach scanner checks your email against a database of more than 400 billion exposed records, including targeted combolists like this one, so you can find out quickly and change your password if needed.